Hoch
ea4e9263-36f7-490c-9dad-d3b806bcfdf4
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Hoch
CVE-2021-24195
Login as User or Customer < 1.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24194
Limit Login Attempts (Spam Protection) <= 2.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
c873d838-58e8-4f69-bccb-6d1de8d91877
Login as User or Customer <= 2.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24188
WP Copy Protection & No Right Click <= 3.1.4 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24192
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
b4d33e69-3620-42d9-adb3-267a5ed02a58
WP Maintenance Mode & Site Under Construction <= 1.8.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24189
Captchinoo Captcha <= 2.3 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24191
WP Maintenance Mode & Site Under Construction < 1.8.2 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
7d525c50-5911-4be6-a860-b48db619adba
Limit Login Attempts (Spam Protection) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
70c144c9-2d96-404d-bcca-707519c9b71c
WP Content Copy Protection & No Right Click <= 3.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
5658f62b-2f4a-46f7-b229-8e239c7ef148
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
CVE-2021-24190
WooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
Hoch
CVE-2021-24193
Visitor Traffic Real Time Statistics <= 2.11 - Missing Authorization to Arbitrary Plugin Installation/Activation
Hoch
245f8eec-d496-4298-800d-ea1120640e2d
Captchinoo, admin login page protection with Google recaptcha <= 2.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Hoch
22713937-d834-46cf-83ec-6f9f61b548e3
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Mittel
21a1a6c2-0eb1-4ee3-abf0-76b84adca01b
iThemes Security < 7.9.1 and iThemes Security Pro < 6.8.4 - Hidden Login Bypass
Kritisch
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
Hoch
CVE-2018-8292
.NET Core Information Disclosure
Mittel
CVE-2020-13672
Drupal core - SA-CORE-2021-002
Mittel
CVE-2021-24283
Accordion <= 2.2.29 - Reflected Cross-Site Scripting
Mittel
CVE-2021-24277
RSS for Yandex Turbo <= 1.29 - Authenticated Stored Cross-Site Scripting
Mittel
CVE-2021-24323
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Kritisch
CVE-2020-1747
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method o
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.